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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 2/27/08 has been entered. 

2. Claims 1-5, 12-13, and 23-26 have been cancelled. Claims 6 and 1 1 have been amended. 
Claims 6-11, 14-22, 27-28 are pending. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

4. Claims 6-11, 14-21 are rejected under 35 U.S.C. 103(a) as being unpatentable over Ortiz 
et al(2003/0163710) in view of Ebara(2002/00 10862). 

5. As per claim 6, Ortiz et al discloses a biometric data storing unit which stores a plurality 
of kinds of biometric data associated with a person[0061, 0100, fig. 8 sheet 8]; a biometric data 
acquisition unit which acquires one kind of biometric data[0096]; a person authentication unit 
which authenticates said person based on said acquired one kind of biometric data and said 
plurality of kinds of biometric data stored in said biometric data storing unit[01 14]. Ortiz is 
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silent on biometric data output unit which selects and outputs a designated kind of biometric data 
of the person from said biometric data storing unit to an authentication device including a 
dictionary data storing unit storing dictionary data, to authenticate the person by matching the 
output designated biometric data with the dictionary data after the person has been authenticated 
by said person authentication unit. Ebara discloses biometric data output unit which selects and 
outputs another kind of biometric data of the person, designated by an authentication device, 
from said biometric data storing unit to an authentication device including a dictionary data 
storing unit storing dictionary data, to authenticate the person by matching the another kind of 
biometric data with the dictionary data after the person has been authenticated by said person 
authentication unit[0025-0026, 0028-0029, 0038]. It would have been obvious to one of 
ordinary skill in the art at the time of the invention to include biometric data output unit which 
selects and outputs a designated kind of biometric data of the person from said biometric data 
storing unit to an authentication device including a dictionary data storing unit storing dictionary 
data, to authenticate the person by matching the output designated biometric data with the 
dictionary data after the person has been authenticated by said person authentication unit of 
Ebara with Ortiz, the motivation is that authentication data of Ortiz that has multiple different 
biometric attributes that can be used to authenticate a user and Ebara's two authentication 
apparatus can provide flexibility in that a person can be authenticated using two different 
biometric attributes[0042 of Ebara]. 

6. As per claim 7, Ortiz et al discloses a biometric data processing unit which edits and 
processes at least partially said biometric data selected from said biometric data storing unit, 
wherein said edited and processed biometric data is output[0123]. 
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7. As per claim 8, Ortiz discloses a biometric data converting unit which converts the 
format of said biometric data selected from said biometric data storing unit, wherein said format- 
converted biometric data is output[0032, 0078-0080]. 

8. As per claim 9, Ortiz discloses a corresponding data generating unit which, from said 
biometric data selected from said biometric data storing unit, generates corresponding data 
having a certain bit length and corresponding to said biometric data, wherein said generated 
corresponding data is output from said biometric data output unit[0087-0089]. 

9. As per claim 10, Ortiz discloses a corresponding data parameter generating unit which 
generates a parameter to be used for generating said corresponding data[0073, 0088]. 

10. As per claim 11, Ortiz et al discloses a terminal device[0023] having a biometric data 
storing unit which stores a plurality of kinds of biometric data associated with a person[0031- 
0032, 0034], a biometric data acquiring unit which acquires one kind of biometric data, a second 
person authentication unit which performs person authentication by matching the one kind of 
biometric data acquired by the biometric data acquiring unit with the plurality of kinds of 
biometric data stored in the biometric data storing unit[0023, 0105, 01 14]. Ebara discloses and a 
biometric data transmitting unit which outputs at least another kind of biometric data when the 
person has been authenticated by the second person authentication unit[0028-0029] and an 
authentication device having a dictionary data storing unit which stores biometric data as 
dictionary data to be used for authentication[0038], and a first person authentication unit which 
performs first person authentication based on said at least another kind of biometric data 
transmitted from said biometric data transmitting unit and said dictionary data stored in said 
dictionary data storing unit[0025-0026]. It would have been obvious to one of ordinary skill in 
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the art at the time of the invention to include biometric data output unit which selects and outputs 
a designated kind of biometric data of the person from said biometric data storing unit to an 
authentication device including a dictionary data storing unit storing dictionary data, to 
authenticate the person by matching the output designated biometric data with the dictionary data 
after the person has been authenticated by said person authentication unit of Ebara with Ortiz, the 
motivation is that authentication data of Ortiz that has multiple different biometric attributes that 
can be used to authenticate a user and Ebara's two authentication apparatus can provide 
flexibility in that a person can be authenticated using two different biometric attributes [0042 of 
Ebara]. 

11. As per claim 14, Ortiz discloses wherein said authentication device comprises a 
corresponding data generating unit which, based on said biometric data transmitted from said 
biometric data transmitting unit, generates corresponding data having a certain bit length and 
corresponding to said biometric data, wherein specific dictionary data stored in said dictionary 
data storing unit is located by using said generated corresponding data, and said first person 
authentication unit performs said person authentication based on said specific dictionary data and 
said transmitted biometric data[0087-0089]. 

12. As per claim 15, Ortiz discloses wherein when said person authentication based on said 
specific dictionary data cannot be performed, said authentication device performs said person 
authentication based on all of said dictionary data stored in said dictionary data storing unit and 
said transmitted biometric data[0086, 0124]. 

13. As per claim 16, Ortiz discloses wherein said terminal device includes a first biometric 
data processing unit which edits and processes at least partially said biometric data selected from 
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said biometric data storing unit[0123], and a first processing data storing unit which stores data 
that said first biometric data processing unit uses to edit and process said biometric data[0123], 
and said authentication device includes a second biometric data processing unit which edits and 
processes said dictionary data at least partially[0105, 0123], and a second processing data storing 
unit which stores data that said second biometric data processing unit uses to edit and process 
said dictionary data, and wherein said first person authentication unit performs said person 
authentication based on said edited and processed biometric data and said edited and processed 
dictionary data[0105]. 

14. As per claim 17, Ortiz discloses wherein said authentication device comprises a 
conversion data storing unit which stores conversion data concerning said biometric data used in 
said first person authentication unit, and said terminal device comprises a biometric data 
converting unit which converts the format of said biometric data stored in said biometric data 
storing unit, and wherein said biometric data converting unit converts the format of said 
biometric data by using said format data transmitted from said conversion data storing unit, and 
said format-converted biometric data is transmitted to said authentication device[0078-0080, 
0083]. 

15. As per claim 18, Ortiz discloses a first corresponding data generating unit which 
generates corresponding data having a certain bit length and corresponding to specific biometric 
data selected from along said plurality of biometric data stored in said biometric data storing 
unit, and a corresponding data transmitting unit which transmits out said generated first 
corresponding data; the authentication device [0122, 0124], a second corresponding data 
generating unit which generates corresponding data having a certain bit length and corresponding 
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to said dictionary data wherein, the first person authentication unit which performs first person 
authentication based on said transmitted first corresponding data and said second corresponding 
data[0087-0089]. 

16. As per claim 19, Ortiz discloses wherein said terminal device includes a biometric data 
acquisition unit which acquires biometric data and a second person authentication unit which 
performs second person authentication[0023, 0105, 01 14], and wherein said second person 
authentication is performed using said acquired biometric data and said biometric data stored in 
said biometric data storing unit and, when the identity of said person has been authenticated, said 
first corresponding data to be used in said first person authentication unit is transmitted to said 
authentication device[0105, 0135]. 

17. As per claim 20, Ortiz discloses wherein said terminal device includes a first 
corresponding data parameter generating unit which generates a corresponding data parameter to 
be used for generating said corresponding data, and wherein said generated corresponding data 
parameter is not only used in said first corresponding data generating unit, but also transmitted to 
said authentication device and used in said second corresponding data generating unit[0073, 
0088]. 

18. As per claim 21, Ortiz discloses wherein said authentication device includes a second 
corresponding data parameter generating unit which generates a corresponding data parameter to 
be used for generating said corresponding data, and wherein said generated corresponding data 
parameter is not only used in said second corresponding data generating unit, but also 
transmitted to said terminal device and used in said first corresponding data generating 
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unit[0073, 0135]. 

Claim Rejections - 35 USC § 103 

19. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

20. Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Ortiz(2003/0163710) in view of Ebara and further in view of Uchida(2001/0025342). 

21 . As per claim 22, Ortiz nor Ebara disclose wherein said authentication device encrypts 
data that said person has by using said corresponding data used for the authentication of said 
person as an encryption key. Uchida discloses wherein the authentication device encrypts data 
that the person has by using the corresponding data used for authentication of the person as an 
encryption key[0022, 0028]. It would have been obvious of one of ordinary skill in the art at the 
time of the invention to include biometric data is encrypted biometric data of Uchida with Ortiz, 
because encrypting biometric data is a protective measure that can enhance security, because 
even if an unauthorized person steals the biometric data in transit, because the biometric data is 
encoded[0067 of Uchida] it is intelligible. 

Allowable Subject Matter 

22. Claims 27-28 are allowable for the following features, "the decryption key is used by the 
authentication device, the biometric data acquisition device charges a fee to the authentication 
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device for the use", and "charging a fee to the authentication device according to the number of 
times that the biometric data stored into the terminal device by the biometric data acquisition 
device is used by the authentication device". Prior art of record fails to disclose charging a fee 
for a decryption key, and charging a fee according to the number of times that the biometric data 
is stored. In prior art, if a user is enrolled in the system, a user is given a decryption key, there is 
no suggestion or disclosure of a charge to use a decryption key, and no suggestion in prior art as 
to how many times biometric data is stored. The Applicant is urged to incorporate allowable 
subject matter as stated in claims 27-28, in independent claims 6 and 1 1 . The Applicant 
contacted Attorney of record, to do an Examiner's Amendment to incorporate claims 27-28 into 
independent claims 6, and 1 1 . In order to reduce prosecution, the Applicant is urged to amend 
claims 6 and 1 1, by incorporating claim limitations of claims 27-28 into claims 6 and 1 1, or by 
canceling claims 6 and 11, since claims 27-28 are allowable. 



Response to Amendment 

23. The Applicant states that Ortiz nor Ebara disclose biometric data output unit which 
selects and outputs another kind of biometric data of the person, designated by an authentication 
device. The Examiner disagrees with the Applicant. Ortiz discloses a plurality of biometric 
attributes can be stored, such as fingerprint and iris data[0100]. Ortiz discloses a system that has 
a first, second, third biometric attribute input stages. Ortiz discloses during a first biometric 
attribute input stage; a user can be prompted through a display unit to input his or her name or 
other word or phrase. During a second biometric attribute input stage, the user can be requested 
to input his/her right hand. Finally, during a third biometric attribute input stage, the user can be 
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requested to provide a biometric sample of his/her right eye[0105]. Ebara discloses two 
authentication apparatus, first authentication apparatus acquires the user's biometric information 
and converts the features to authentication data[0025]. Ebara discloses the second authentication 
apparatus acquires a user's biometric information, and converts features to authentication. It 
would have been obvious to include Ebara's two authentication apparatus with Ortiz, because 
Ortiz has a plurality of biometric data that can be used to authenticate a person, the first 
authentication apparatus can use one biometric attribute of Ortiz, and the second authentication 
apparatus can use another biometric attribute[0029 of Ebara and 0105 of Ortiz]. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JENISE E. JACKSON whose telephone number is (571)272- 
3791 . The examiner is on an Increased Flex time Schedule, but generally in the office M-Fri(8- 
4:30). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kristine Kincaid can be reached on (571) 272-4063. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/J. E. J./ 

Examiner, Art Unit 2139 

March 23, 2008 
/Kristine Kincaid/ 

Supervisory Patent Examiner, Art Unit 2139 



